Server Configuration
Joomla Upload Folder Indexing Check (images/)
The Joomla /images/ folder may be exposed if indexing is enabled. Learn how to protect your uploaded files from public viewing.
What this test checks
This test checks whether the Joomla upload folder (usually /images/) is accessible and whether indexing is enabled. An unprotected folder allows any visitor to list all uploaded files, including photos, documents, and sometimes sensitive files.
Our recommendation
Protect the /images/ folder with a .htaccess file containing 'Options -Indexes' or, for Nginx, 'autoindex off;'. Add an empty index.html file in the folder. Regularly check the folder access to ensure indexing is disabled.
Security tests
Read more
CMS Security